#!/bin/sh -ux

CA_FILE=/etc/pki/ca-trust/source/anchors/openstack-ca.pem

if [ -n "$OPENSTACK_CA" ] ; then
    cat >> $CA_FILE <<EOF
$OPENSTACK_CA
EOF
    chmod 444 $CA_FILE
    chown root:root $CA_FILE
    update-ca-trust extract
fi